CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 09/07/2024 |
| CVE-2023-3288 | HOCH8.8 | A BOLA vulnerability in POST /providers allows a low privileged user to create a privileged user (provider) in the system. This results in privilege escalation. | 09/07/2024 |
| CVE-2023-3287 | HOCH8.8 | A BOLA vulnerability in POST /admins allows a low privileged user to create a high privileged user (admin) in the system. This results in privilege escalation. | 09/07/2024 |
| CVE-2023-3286 | MITTEL6.5 | A BOLA vulnerability in POST /secretaries allows a low privileged user to create a low privileged user (secretary) in the system. This results in unauthorized data manipulation. | 09/07/2024 |
| CVE-2023-38055 | HOCH8.1 | A BOLA vulnerability in GET, PUT, DELETE /services/{serviceId} allows a low privileged user to fetch, modify or delete the services of any user (including admin). This results in unauthorized access and unauthorized data manipulation. | 09/07/2024 |
| CVE-2023-38054 | HOCH8.1 | A BOLA vulnerability in GET, PUT, DELETE /customers/{customerId} allows a low privileged user to fetch, modify or delete a low privileged user (customer). This results in unauthorized access and unauthorized data manipulation. | 09/07/2024 |
| CVE-2023-38053 | HOCH8.1 | A BOLA vulnerability in GET, PUT, DELETE /settings/{settingName} allows a low privileged user to fetch, modify or delete the settings of any user (including admin). This results in unauthorized access and unauthorized data manipulation. | 09/07/2024 |
| CVE-2023-38052 | HOCH8.1 | A BOLA vulnerability in GET, PUT, DELETE /admins/{adminId} allows a low privileged user to fetch, modify or delete a high privileged user (admin). This results in unauthorized access and unauthorized data manipulation. | 09/07/2024 |
| CVE-2023-38051 | HOCH8.1 | A BOLA vulnerability in GET, PUT, DELETE /secretaries/{secretaryId} allows a low privileged user to fetch, modify or delete a low privileged user (secretary). This results in unauthorized access and unauthorized data manipulation. | 09/07/2024 |
| CVE-2023-38050 | HOCH8.1 | A BOLA vulnerability in GET, PUT, DELETE /webhooks/{webhookId} allows a low privileged user to fetch, modify or delete a webhook of any user (including admin). This results in unauthorized access and unauthorized data manipulation. | 09/07/2024 |
| CVE-2023-38049 | HOCH8.1 | A BOLA vulnerability in GET, PUT, DELETE /appointments/{appointmentId} allows a low privileged user to fetch, modify or delete an appointment of any user (including admin). This results in unauthorized access and unauthorized data manipulation. | 09/07/2024 |
| CVE-2023-38048 | HOCH8.1 | A BOLA vulnerability in GET, PUT, DELETE /providers/{providerId} allows a low privileged user to fetch, modify or delete a privileged user (provider). This results in unauthorized access and unauthorized data manipulation. | 09/07/2024 |
| CVE-2023-38047 | HOCH8.1 | A BOLA vulnerability in GET, PUT, DELETE /categories/{categoryId} allows a low privileged user to fetch, modify or delete the category of any user (including admin). This results in unauthorized access and unauthorized data manipulation. | 09/07/2024 |
| CVE-2023-3700 | MITTEL4.3 | Authorization Bypass Through User-Controlled Key in GitHub repository alextselegidis/easyappointments prior to 1.5.0.
| 17/07/2023 |
| CVE-2023-2105 | HOCH8.8 | Session Fixation in GitHub repository alextselegidis/easyappointments prior to 1.5.0. | 15/04/2023 |
| CVE-2023-2104 | MITTEL5.4 | Improper Access Control in GitHub repository alextselegidis/easyappointments prior to 1.5.0. | 15/04/2023 |
| CVE-2023-2103 | MITTEL5.4 | Cross-site Scripting (XSS) - Stored in GitHub repository alextselegidis/easyappointments prior to 1.5.0. | 15/04/2023 |